IT GRC Lead
US
Why Valvoline Global Operations?
At Valvoline Global Operations, we’re proud to be The Original Motor Oil, but we’ve never rested on being first. Founded in 1866, we introduced the world’s first branded motor oil, staking our claim as a pioneer in the automotive and industrial solutions industry. Today, as an affiliate of Aramco, one of the world’s largest integrated energy and chemicals companies, we are driven by innovation and committed to creating sustainable solutions for a better future.
With a global presence, we develop future-ready products and provide best-in-class services for our partners around the world. For us, originality isn’t just about where we began; it’s about where we’re headed and how we’ll lead the way. We are originality in motion.
Our corporate values—Care, Integrity, Passion, Unity, and Excellence—are at the heart of everything we do. These values define how we operate, how we treat one another, and how we engage with our partners, customers, and the communities we serve. At Valvoline Global, we are united in our commitment to:
• Treating everyone with care.
• Acting with unwavering integrity.
• Striving for excellence in all endeavors.
• Delivering on our commitments with passion.
• Collaborating as one unified team.
When you join Valvoline Global, you’ll become part of a culture that celebrates creativity, innovation, and excellence. Together, we’re shaping the future of automotive and industrial solutions.
Job Purpose
The Sr. GRC Analyst supports Valvoline Global s IT Governance, Risk, and Compliance (GRC) function by advancing governance, data protection, and information security initiatives. Key responsibilities include conducting information security risk and control assessments, supporting security awareness and information security maturity activities, assisting with audits, and operationalizing system to monitor and ensure regulatory requirements and industry best practices.
The Sr. GRC Analyst partners with internal and external stakeholders to support the business through process development and improvement, assessments, documentation, reviews, reporting, and analytics. This role also develops and strengthens privacy program operations and promotes efficient, sustainable processes while translating complex privacy and data protection topics for nontechnical audiences.
How You Make an Impact (Job Accountabilities)
• Execute the company’s cyber risk assessment and cyber security compliance programs. Lead risk assessment engagements to capture and measure cyber security risks, identify risk owners, and develop mitigation plans. Monitor cyber security risks by continuous re-assessment according to risk level.
• Maintain the company’s IT General Control (ITGC) framework. Lead consulting engagements to identify key controls, document control processes, and establish audit evidence requirements.
• Drive efforts to improve IT maturity and effectiveness of internal controls through process improvement initiatives and automation to enhance control maturity.
• Report on metrics measured by the NIST CSF and C2M2 based Aramco maturity frameworks. Provide guidance to business units on compliance requirements, industry standards, and emerging risks for information systems.
• Improve user acceptance, maturity and implementation of IT-GRC systems such as Service Now IRM, KnowBe4, Jira and other new and emerging technology solutions.
What You Bring to the Role (Job Qualifications / Education / Skills / Requirements / Capabilities)
• Five or more years of experience in IT or enterprise risk management, IT or operational audit, or a related field demonstrating knowledge of third-party risk, privacy, information security, compliance requirements, and control implementation.
• Knowledge of the NIST CSF and C2M2 maturity frameworks and relevant assessment practices.
• Experience assessing risk, control design and control effectiveness for IT and operational controls.
• Competence in managing audit requests, writing narratives, documenting & submitting evidence and following up.
• Experience contributing to complex projects that include stakeholders from multiple business processes.
• Ability to own your own workflow and manage multiple priorities.
Competencies Desired
• ServiceNow GRC modules: Integrated Risk Management, Third-Party Risk Management and/or Privacy Management.
• Jira Cloud project management software.
• NIST Cybersecurity Framework 1.1 and/or 2.0, and the Cybersecurity Capability Maturity Model for OT systems (C2M2).
• Strong collaboration and communication skills and the ability to engage effectively with peers and leadership.
• Data analytics, reporting and presenting metrics to leadership
Working Conditions / Physical Requirements / Travel Requirements
• Working Conditions / Physical Requirements: Remote office setting; prolonged periods of computer-based work and virtual collaboration.
• Travel Requirements: Minimal, up to 5%.
Valvoline Global is an equal opportunity employer. We are dedicated to fostering an environment where every individual feels valued, respected, and empowered to contribute their unique perspectives and skills. We strictly prohibit discrimination and harassment of any kind, regardless of race, color, religion, age, sex, national origin, disability, genetics, veteran status, sexual orientation, gender identity, or any other legally protected characteristic.
We are committed to ensuring accessibility throughout our recruitment process. If you require a reasonable accommodation to participate in any stage of the recruitment or selection process, please contact us at:.
• Email: Valvolineglobalcareers@valvolineglobal.com
This contact information is solely for accommodation requests. For inquiries about application status, please use the appropriate channels listed in your application materials.
Are You Ready to Make an Impact?
At Valvoline Global, we’re looking for passionate and talented individuals to join our journey of innovation and excellence. Are you ready to shape the future with us? Apply today.
Requisition ID: 2710
